| Package | Affected versions | Patched versions |
|---|---|---|
| nfs-utils | = 1.2.0= 1.2.1= 1.2.2≤ 1.2.3 |
The nfs_addmntent function in support/nfs/nfs_mntent.c in the mount.nsf tool in nfs-utils before 1.2.4 attempts to append to the /etc/mtab file without first checking whether resource limits would interfere, which allows local users to corrupt this file via a process with a small RLIMIT_FSIZE value, a related issue to CVE-2011-1089.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free